Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/7c8240c6-4df6-32c5-a0b7-dc91d4bf9af0.roa
File:                     7c8240c6-4df6-32c5-a0b7-dc91d4bf9af0.roa (raw, json)
Hash identifier:          CeCdMXokbZDnUXqVdP2uTdxCjWndY0lBz31EagNu5lE=
Subject key identifier:   EB:55:CC:82:57:E4:9B:40:75:49:CF:0D:85:F2:52:00:E0:0C:49:C4
Certificate issuer:       /CN=835152c2-2ed8-4151-8f82-ac9407335b2c
Certificate serial:       010D0C9F4328584EBC770802F650664CE4AD1BC0
Authority key identifier: 8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/7c8240c6-4df6-32c5-a0b7-dc91d4bf9af0.roa
Signing time:             Wed 05 Aug 2026 13:00:12 +0000
ROA not before:           Wed 05 Aug 2026 13:00:12 +0000
ROA not after:            Tue 03 Nov 2026 14:00:12 +0000
asID:                     19871
IP address blocks:        198.20.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bc:77:08:02:f6:50:66:4c:e4:ad:1b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835152c2-2ed8-4151-8f82-ac9407335b2c
        Validity
            Not Before: Aug  5 13:00:12 2026 GMT
            Not After : Nov  3 14:00:12 2026 GMT
        Subject: CN=245a0389-77e4-4edf-bdae-ff8860a1a41e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e0:6f:5d:8f:94:80:e6:6d:29:8d:4b:ae:6d:
                    88:41:a7:b6:b5:09:55:d2:6f:78:a9:0f:32:9e:d6:
                    62:9c:b0:6f:75:63:df:4e:f1:60:24:bf:c1:3a:01:
                    13:71:99:e9:3a:24:17:3e:20:ff:17:d2:53:f8:9e:
                    b8:2d:6f:cb:bf:1e:51:4f:ec:2d:ad:82:30:be:d6:
                    35:d8:83:33:c1:3c:cc:93:ed:35:f9:12:a1:f1:71:
                    d3:af:29:4d:df:41:90:f9:39:29:65:54:91:19:e6:
                    08:17:33:46:6b:21:49:b0:4b:e6:a9:00:41:5a:91:
                    75:7d:ba:1d:d3:41:2a:48:10:4e:ac:ee:a0:b4:e4:
                    ba:a9:e6:39:4c:a8:9e:4f:de:a9:49:66:ba:d2:0f:
                    fd:c9:1a:0c:26:27:06:75:89:2a:47:85:ed:fe:1e:
                    c5:ec:e6:0a:25:2c:6d:f5:96:98:c1:1a:1a:66:ec:
                    5b:37:b1:80:2a:fd:23:d3:d3:b4:03:eb:30:b1:16:
                    15:f4:cb:12:0a:21:7c:7b:aa:ca:96:59:5e:99:36:
                    26:fc:a4:19:09:14:8d:14:3f:d2:05:1d:b4:b4:d0:
                    cf:df:51:bc:b9:c0:09:f1:34:b9:3d:59:cc:7a:6e:
                    16:da:11:72:4e:98:69:1b:7b:a5:d1:dd:49:09:d1:
                    69:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:55:CC:82:57:E4:9B:40:75:49:CF:0D:85:F2:52:00:E0:0C:49:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/7c8240c6-4df6-32c5-a0b7-dc91d4bf9af0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl

            X509v3 Authority Key Identifier:
                keyid:8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.20.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:07:fd:80:eb:d9:36:b6:59:52:61:27:5e:38:ac:a2:f6:a6:
         2a:93:ab:5b:9a:2e:98:fd:9f:9b:6e:39:b1:b1:65:c8:fe:47:
         8d:90:6c:d1:eb:c0:12:06:45:90:7b:1e:29:01:50:3e:06:8f:
         d5:40:0b:10:23:6a:43:7f:ae:68:c9:a0:cd:a1:21:aa:a1:9d:
         cf:0d:bf:01:10:f0:b4:3c:f2:b0:d1:90:3c:e5:17:b6:79:9a:
         77:1a:df:3f:ec:0e:a0:35:f8:89:95:ad:c7:a0:37:01:f1:36:
         a4:53:41:92:34:3f:da:a6:a1:e1:be:6f:d6:be:e6:48:97:d2:
         4a:f6:ca:68:b1:e9:80:de:07:0d:3e:ec:92:dd:52:73:02:54:
         77:0b:53:36:b4:d9:6f:cf:6e:b8:48:7b:10:4c:b5:41:f1:03:
         e1:77:92:36:a6:2c:ff:af:f5:61:e5:85:7f:e5:b4:92:c0:6f:
         eb:dd:57:71:02:9d:23:50:df:55:ce:e5:10:eb:38:cc:83:69:
         27:c2:02:51:dc:5b:b5:6f:93:96:49:fe:33:00:eb:0a:06:99:
         2a:c7:72:2c:2d:28:92:f4:1c:5b:b4:9d:5f:21:0a:60:b3:12:
         b6:c2:6a:2a:97:22:e5:3b:cd:c2:a5:51:42:27:96:73:19:30:
         24:f4:dc:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:23:49 2026 by rpki-client